riot-ci/RIOT
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

core: Fix undefined behaviour in C11 atomics

Browse Source 
Casting pointers to volatile memory to pointers to regular memory is permitted,
but using those pointers to access the memory results in undefined behavior.
This commit changes the casts to no longer drop the volatile qualifier.

References: https://en.cppreference.com/w/c/language/volatile
This commit is contained in:
Marian Buschsieweke 2019-05-15 14:31:01 +02:00
parent bf000a1fa5
commit 7749e621b8
No known key found for this signature in database
GPG Key ID: 61F64C6599B1539F
1 changed files with 22 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
core/atomic_c11.c
View File

@ -66,7 +66,7 @@ typedef uint64_t I8;
{ \ { \
(void) memorder; \ (void) memorder; \
unsigned int mask = irq_disable(); \ unsigned int mask = irq_disable(); \
I##n old = *(I##n *)ptr; \ I##n old = *(const volatile I##n *)ptr; \
irq_restore(mask); \ irq_restore(mask); \
return old; \ return old; \
} }
@ -81,7 +81,7 @@ typedef uint64_t I8;
{ \ { \
(void) memorder; \ (void) memorder; \
unsigned int mask = irq_disable(); \ unsigned int mask = irq_disable(); \
*(I##n *)ptr = val; \ *(volatile I##n *)ptr = val; \
irq_restore(mask); \ irq_restore(mask); \
} }
@ -95,8 +95,8 @@ typedef uint64_t I8;
{ \ { \
(void) memorder; \ (void) memorder; \
unsigned int mask = irq_disable(); \ unsigned int mask = irq_disable(); \
I##n old = *(I##n *)ptr; \ I##n old = *(volatile I##n *)ptr; \
*(I##n *)ptr = desired; \ *(volatile I##n *)ptr = desired; \
irq_restore(mask); \ irq_restore(mask); \
return old; \ return old; \
} }
@ -114,14 +114,14 @@ typedef uint64_t I8;
(void) success_memorder; \ (void) success_memorder; \
(void) failure_memorder; \ (void) failure_memorder; \
unsigned int mask = irq_disable(); \ unsigned int mask = irq_disable(); \
I##n cur = *(I##n *)ptr; \ I##n cur = *(volatile I##n *)ptr; \
if (cur != *(I##n *)expected) { \ if (cur != *(I##n *)expected) { \
*(I##n *)expected = cur; \ *(I##n *)expected = cur; \
irq_restore(mask); \ irq_restore(mask); \
return false; \ return false; \
} \ } \
\ \
*(I##n *)ptr = desired; \ *(volatile I##n *)ptr = desired; \
irq_restore(mask); \ irq_restore(mask); \
return true; \ return true; \
} }
@ -139,8 +139,8 @@ typedef uint64_t I8;
{ \ { \
unsigned int mask = irq_disable(); \ unsigned int mask = irq_disable(); \
(void)memmodel; \ (void)memmodel; \
I##n tmp = *(I##n *)ptr; \ I##n tmp = *(volatile I##n *)ptr; \
*(I##n *)ptr = prefixop(tmp op val); \ *(volatile I##n *)ptr = prefixop(tmp op val); \
irq_restore(mask); \ irq_restore(mask); \
return tmp; \ return tmp; \
} }
@ -158,8 +158,8 @@ typedef uint64_t I8;
{ \ { \
(void)memmodel; \ (void)memmodel; \
unsigned int mask = irq_disable(); \ unsigned int mask = irq_disable(); \
I##n tmp = prefixop((*(I##n *)ptr) op val); \ I##n tmp = prefixop((*(volatile I##n *)ptr) op val); \
*(I##n *)ptr = tmp; \ *(volatile I##n *)ptr = tmp; \
irq_restore(mask); \ irq_restore(mask); \
return tmp; \ return tmp; \
} }